@aifabrix/builder 2.50.0 → 2.51.0

package/.cursor/plans/157.1-security-quality-violations-by-type.csv

@@ -0,0 +1,374 @@
+rule_title,location,symbol_or_detail,message,done
+Comparison between inconvertible types,lib/app/certification-verify-rows.js:19,id,"Variable 'id' is of type date, object or regular expression, but it is compared to an expression of type null.",true
+Comparison between inconvertible types,lib/certification/merge-certification-from-artifact.js:16,id,"Variable 'id' is of type date, object or regular expression, but it is compared to an expression of type null.",true
+Comparison between inconvertible types,tests/local/lib/app-run-branch-coverage.test.js:232,error,"Variable 'error' cannot be of type null, but it is compared to an expression of type null.",true
+Identical operands,lib/app/show.js:480,,Operands configD ... Sources and configD ... Sources are identical.,true
+Identical operands,tests/lib/app/app-deploy.test.js:1159,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator-validation.test.js:232,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator-validation.test.js:285,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1372,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1376,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1416,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1420,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:145,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1450,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1462,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1492,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1525,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:155,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1561,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1596,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1626,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1656,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1686,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1716,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1750,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1756,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1792,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1798,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1835,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1841,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1870,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1882,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1909,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1935,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1963,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:1991,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2019,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2046,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2080,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2109,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2124,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2158,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2192,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2272,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2288,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:2326,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:252,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:301,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:328,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:332,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:365,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:381,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/generator/generator.test.js:387,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/validation/validator.test.js:1008,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/validation/validator.test.js:1014,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/validation/validator.test.js:963,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Identical operands,tests/lib/validation/validator.test.js:969,,Operands filePat ... .yaml') and filePat ... .yaml') are identical.,true
+Missing await,lib/validation/validator.js:227,validateRoles,,true
+Unneeded defensive code,lib/infrastructure/helpers.js:184,,This guard always evaluates to false.,true
+Unneeded defensive code,lib/infrastructure/helpers.js:184,,This guard always evaluates to false.,true
+Unneeded defensive code,lib/utils/dev-config.js:48,,This guard always evaluates to false.,true
+Unneeded defensive code,lib/utils/dev-config.js:48,,This guard always evaluates to false.,true
+Unneeded defensive code,lib/utils/error-formatters/error-parser.js:28,,This guard always evaluates to false.,true
+Unneeded defensive code,lib/utils/error-formatters/error-parser.js:28,,This guard always evaluates to false.,true
+Unneeded defensive code,tests/lib/utils/token-manager.test.js:1072,,This guard always evaluates to false.,true
+Unneeded defensive code,tests/lib/utils/token-manager.test.js:1075,,This guard always evaluates to false.,true
+"Unused variable, import, function or class",tests/bin/aifabrix.test.js:117,,Unused variable mockSetupCommands.,true
+"Unused variable, import, function or class",tests/bin/aifabrix.test.js:118,,Unused variable mockSetupAppCommands.,true
+"Unused variable, import, function or class",tests/helpers/mock-controller.js:12,,Unused variable axios.,true
+"Unused variable, import, function or class",tests/integration/hubspot/hubspot-integration.test.js:19,,Unused variable validateAgainstSchema.,true
+"Unused variable, import, function or class",tests/integration/hubspot/hubspot-integration.test.js:25,,Unused variable generator.,true
+"Unused variable, import, function or class",tests/integration/steps/step-01-create.test.js:11,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/integration/steps/step-02-dockerfile.test.js:24,,Unused variable port.,true
+"Unused variable, import, function or class",tests/integration/steps/step-03-resolve.test.js:23,,Unused variable port.,true
+"Unused variable, import, function or class",tests/integration/steps/step-04-json.test.js:23,,Unused variable port.,true
+"Unused variable, import, function or class",tests/integration/steps/step-06-build.test.js:21,,Unused variable port.,true
+"Unused variable, import, function or class",tests/integration/steps/step-09-validate-health.test.js:14,,Unused variable execCommand.,true
+"Unused variable, import, function or class",tests/integration/workflow.test.js:29,,Unused variable port.,true
+"Unused variable, import, function or class",tests/lib/api.test.js:33,,Unused variable getOrRefreshDeviceToken.,true
+"Unused variable, import, function or class",tests/lib/app/app-deploy.test.js:14,,Unused variable app.,true
+"Unused variable, import, function or class",tests/lib/app/app-helpers.test.js:383,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/app/app-list.test.js:41,,Unused variable formatAuthenticationError.,true
+"Unused variable, import, function or class",tests/lib/app/app-run-helpers.test.js:105,,Unused variable readFile.,true
+"Unused variable, import, function or class",tests/lib/app/app-run-uncovered.test.js:179,,Unused variable config.,true
+"Unused variable, import, function or class",tests/lib/app/app-run-uncovered.test.js:209,,Unused variable execAsync.,true
+"Unused variable, import, function or class",tests/lib/app/app-run-uncovered.test.js:34,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/app/app.test.js:17,,Unused variable templates.,true
+"Unused variable, import, function or class",tests/lib/app/app.test.js:19,,Unused variable githubGenerator.,true
+"Unused variable, import, function or class",tests/lib/app/app.test.js:20,,Unused variable validator.,true
+"Unused variable, import, function or class",tests/lib/app/app.test.js:21,,Unused variable secrets.,true
+"Unused variable, import, function or class",tests/lib/app/app.test.js:485,,Unused variable execAsync.,true
+"Unused variable, import, function or class",tests/lib/app/show.test.js:62,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/app/show.test.js:75,,Unused variable loadVariablesFromPath.,true
+"Unused variable, import, function or class",tests/lib/cli-additional-branches.test.js:19,,Unused variable app.,true
+"Unused variable, import, function or class",tests/lib/cli-additional-branches.test.js:20,,Unused variable secrets.,true
+"Unused variable, import, function or class",tests/lib/cli-additional-branches.test.js:23,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/cli-additional-branches.test.js:24,,Unused variable handleCommandError.,true
+"Unused variable, import, function or class",tests/lib/cli-additional-branches.test.js:24,,Unused variable setupCommands.,true
+"Unused variable, import, function or class",tests/lib/cli-additional.test.js:20,,Unused variable secrets.,true
+"Unused variable, import, function or class",tests/lib/cli-additional.test.js:21,,Unused variable generator.,true
+"Unused variable, import, function or class",tests/lib/cli-additional.test.js:22,,Unused variable validator.,true
+"Unused variable, import, function or class",tests/lib/cli-additional.test.js:23,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/cli-additional.test.js:24,,Unused variable makeApiCall.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:20,,Unused variable infra.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:21,,Unused variable app.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:22,,Unused variable secrets.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:23,,Unused variable generator.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:24,,Unused variable validator.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:25,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:26,,Unused variable saveConfig.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:27,,Unused variable makeApiCall.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:28,,Unused variable inquirer.,true
+"Unused variable, import, function or class",tests/lib/cli-branch-coverage.test.js:29,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/lib/cli-command-actions.test.js:24,,Unused variable validator.,true
+"Unused variable, import, function or class",tests/lib/cli-command-actions.test.js:25,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/cli-command-actions.test.js:36,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/lib/cli-command-actions.test.js:684,,Unused variable options.,true
+"Unused variable, import, function or class",tests/lib/cli-command-actions.test.js:697,,Unused variable envPrompt.,true
+"Unused variable, import, function or class",tests/lib/cli-command-actions.test.js:72,,Unused variable method.,true
+"Unused variable, import, function or class",tests/lib/cli-commands.test.js:9,,Unused variable cli.,true
+"Unused variable, import, function or class",tests/lib/cli-comprehensive.test.js:106,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/cli-comprehensive.test.js:111,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/lib/cli-coverage.test.js:15,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/cli-error-paths.test.js:34,,Unused variable validator.,true
+"Unused variable, import, function or class",tests/lib/cli-error-paths.test.js:36,,Unused variable logger.,true
+"Unused variable, import, function or class",tests/lib/cli-error-paths.test.js:40,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/cli-setup.test.js:57,,Unused variable mockProgram.,true
+"Unused variable, import, function or class",tests/lib/cli-uncovered-commands.test.js:487,,Unused variable appPath.,true
+"Unused variable, import, function or class",tests/lib/cli.test.js:12,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/lib/cli.test.js:13,,Unused variable net.,true
+"Unused variable, import, function or class",tests/lib/cli.test.js:143,,Unused variable mockSecretsPath.,true
+"Unused variable, import, function or class",tests/lib/cli.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/cli/setup-utility.test.js:99,,Unused variable schemaPath.,true
+"Unused variable, import, function or class",tests/lib/commands-app-branch-coverage.test.js:10,,Unused variable fsSync.,true
+"Unused variable, import, function or class",tests/lib/commands-app-direct.test.js:10,,Unused variable fsSync.,true
+"Unused variable, import, function or class",tests/lib/commands-app-direct.test.js:36,,Unused variable app.,true
+"Unused variable, import, function or class",tests/lib/commands-login.test.js:14,,Unused variable makeApiCall.,true
+"Unused variable, import, function or class",tests/lib/commands-login.test.js:882,,Unused variable validationResult.,true
+"Unused variable, import, function or class",tests/lib/commands/app-shell.test.js:47,,Unused variable p.,true
+"Unused variable, import, function or class",tests/lib/commands/app.test.js:12,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/commands/convert.test.js:38,,Unused variable schemaBasePath.,true
+"Unused variable, import, function or class",tests/lib/commands/credential-env.test.js:146,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/commands/credential-push.test.js:37,,Unused variable requireBearerForDataplanePipeline.,true
+"Unused variable, import, function or class",tests/lib/commands/dev-down.test.js:7,,Unused variable promisify.,true
+"Unused variable, import, function or class",tests/lib/commands/login-credentials.test.js:47,,Unused variable formatApiError.,true
+"Unused variable, import, function or class",tests/lib/commands/login-device.test.js:420,,Unused variable originalGetEnvironmentKey.,true
+"Unused variable, import, function or class",tests/lib/commands/login-device.test.js:60,,Unused variable ora.,true
+"Unused variable, import, function or class",tests/lib/commands/login-error-paths.test.js:24,,Unused variable logger.,true
+"Unused variable, import, function or class",tests/lib/commands/login-error-paths.test.js:25,,Unused variable tokenManager.,true
+"Unused variable, import, function or class",tests/lib/commands/logout.test.js:56,,Unused variable mockConfigPath.,true
+"Unused variable, import, function or class",tests/lib/commands/npm-config.test.js:32,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/commands/repair-datasource.test.js:22,,Unused variable MINIMAL_METADATA_SCHEMA.,true
+"Unused variable, import, function or class",tests/lib/commands/repair.test.js:1874,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/commands/repair.test.js:1886,,Unused variable dsPath.,true
+"Unused variable, import, function or class",tests/lib/commands/repair.test.js:265,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/commands/secrets-list.test.js:6,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/commands/secrets-remove.test.js:6,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/commands/up-common.test.js:71,,Unused variable controllerUrlMod.,true
+"Unused variable, import, function or class",tests/lib/commands/upload.test.js:444,,Unused variable displayValidationResults.,true
+"Unused variable, import, function or class",tests/lib/commands/upload.test.js:9,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/commands/wizard-core.test.js:64,,Unused variable datasourceDeploy.,true
+"Unused variable, import, function or class",tests/lib/commands/wizard-core.test.js:65,,Unused variable wizardDataplane.,true
+"Unused variable, import, function or class",tests/lib/commands/wizard.test.js:55,,Unused variable datasourceDeploy.,true
+"Unused variable, import, function or class",tests/lib/commands/wizard.test.js:56,,Unused variable wizardDataplane.,true
+"Unused variable, import, function or class",tests/lib/compose-generator.test.js:13,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/core/config.test.js:11,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/core/config.test.js:27,,Unused variable loadDeveloperId.,true
+"Unused variable, import, function or class",tests/lib/core/diff.test.js:10,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/core/diff.test.js:11,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/core/diff.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/core/key-generator.test.js:278,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/key-generator.test.js:47,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:376,,Unused variable buildSecrets.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:682,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:693,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:703,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:722,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:738,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:754,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:772,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets-utils.test.js:792,,Unused variable serviceVariablesPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:1022,,Unused variable mockSecrets.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:114,,Unused variable mockEnvConfig.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:2417,,Unused variable builderPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:2761,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:3247,,Unused variable secretsPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:3274,,Unused variable secretsPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:3779,,Unused variable outputPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:3854,,Unused variable builderPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:3982,,Unused variable envPath.,true
+"Unused variable, import, function or class",tests/lib/core/secrets.test.js:709,,Unused variable mockSecrets.,true
+"Unused variable, import, function or class",tests/lib/datasource/datasource-deploy.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/datasource/datasource-diff.test.js:9,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/datasource/datasource-list.test.js:9,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/datasource/datasource-validate.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/datasource/log-viewer.test.js:154,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/deployment/deployer-error-paths.test.js:18,,Unused variable axios.,true
+"Unused variable, import, function or class",tests/lib/deployment/deployer-error-paths.test.js:20,,Unused variable logger.,true
+"Unused variable, import, function or class",tests/lib/deployment/deployer-error-paths.test.js:24,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/deployment/environment-deploy.test.js:10,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/deployment/environment-deploy.test.js:101,,Unused variable environmentsApi.,true
+"Unused variable, import, function or class",tests/lib/deployment/push-error-paths.test.js:103,,Unused variable errorOutput.,true
+"Unused variable, import, function or class",tests/lib/deployment/push-error-paths.test.js:11,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/deployment/push-error-paths.test.js:12,,Unused variable logger.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy-helpers.test.js:12,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy-helpers.test.js:202,,Unused variable fallbackPath1.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy-helpers.test.js:302,,Unused variable datasourcePath2.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy.test.js:10,,Unused variable fsPromises.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy.test.js:12,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy.test.js:128,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy.test.js:13,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-deploy.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-download.test.js:110,,Unused variable tempDir.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-download.test.js:12,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-generator.test.js:13,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-generator.test.js:14,,Unused variable handlebars.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-generator.test.js:793,,Unused variable datasourcePaths.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test-error-paths.test.js:51,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test-helpers.test.js:10,,Unused variable logger.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test-helpers.test.js:12,,Unused variable externalSystemSchema.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test-helpers.test.js:243,,Unused variable datasourceSchema.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test-helpers.test.js:9,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test.test.js:10,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test.test.js:100,,Unused variable validateAgainstSchema.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test.test.js:103,,Unused variable displayTestResults.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test.test.js:104,,Unused variable displayIntegrationTestResults.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test.test.js:11,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/external-system/external-system-test.test.js:110,,Unused variable systemKey.,true
+"Unused variable, import, function or class",tests/lib/generator/external-controller-manifest.test.js:11,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/generator/external-controller-manifest.test.js:368,,Unused variable generateControllerManifest.,true
+"Unused variable, import, function or class",tests/lib/generator/external-controller-manifest.test.js:40,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-error-paths.test.js:189,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-error-paths.test.js:284,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-error-paths.test.js:339,,Unused variable systemFilePath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-error-paths.test.js:358,,Unused variable systemFilePath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-helpers.test.js:10,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-helpers.test.js:11,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/generator/generator-validation.test.js:16,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/generator/generator.test.js:13,,Unused variable keyGenerator.,true
+"Unused variable, import, function or class",tests/lib/generator/generator.test.js:2547,,Unused variable missingPath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator.test.js:264,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/generator/generator.test.js:306,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/generator/generator.test.js:63,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/generator/generator.test.js:65,,Unused variable rbacPath.,true
+"Unused variable, import, function or class",tests/lib/generator/wizard-generator.test.js:70,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/health-check.test.js:10,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/lib/infrastructure/infra.test.js:136,,Unused variable mockTempComposePath.,true
+"Unused variable, import, function or class",tests/lib/programmatic/openapi-description-enricher.test.js:19,,Unused variable name.,true
+"Unused variable, import, function or class",tests/lib/utils/api.test.js:36,,Unused variable getOrRefreshDeviceToken.,true
+"Unused variable, import, function or class",tests/lib/utils/app-register-config.test.js:41,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/utils/app-register-validator.test.js:22,,Unused variable originalRelative.,true
+"Unused variable, import, function or class",tests/lib/utils/compose-generate-infra-pgpass.test.js:26,,Unused variable sys.,true
+"Unused variable, import, function or class",tests/lib/utils/configuration-env-resolver.test.js:279,,Unused variable envPath.,true
+"Unused variable, import, function or class",tests/lib/utils/controller-url.test.js:15,,Unused variable isControllerHealthReachable.,true
+"Unused variable, import, function or class",tests/lib/utils/credential-display.test.js:20,,Unused variable STATUS_LABELS.,true
+"Unused variable, import, function or class",tests/lib/utils/dev-cert-helper.test.js:8,,Unused variable os.,true
+"Unused variable, import, function or class",tests/lib/utils/docker.test.js:30,,Unused variable execAsync.,true
+"Unused variable, import, function or class",tests/lib/utils/env-generation.test.js:1839,,Unused variable outEnvPath.,true
+"Unused variable, import, function or class",tests/lib/utils/env-generation.test.js:1882,,Unused variable outEnvPath.,true
+"Unused variable, import, function or class",tests/lib/utils/env-ports.test.js:196,,Unused variable parsed.,true
+"Unused variable, import, function or class",tests/lib/utils/error-formatters/error-parser.test.js:91,,Unused variable errorData.,true
+"Unused variable, import, function or class",tests/lib/utils/external-env-template.test.js:6,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/utils/external-env-template.test.js:7,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/utils/external-system-display.test.js:9,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/utils/external-system-readiness-core.test.js:11,,Unused variable summarizeDatasourceTiersA.,true
+"Unused variable, import, function or class",tests/lib/utils/file-upload.test.js:10,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/utils/local-secrets.test.js:168,,Unused variable secretsDir.,true
+"Unused variable, import, function or class",tests/lib/utils/local-secrets.test.js:29,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/utils/local-secrets.test.js:30,,Unused variable logger.,true
+"Unused variable, import, function or class",tests/lib/utils/local-secrets.test.js:69,,Unused variable secretsPath.,true
+"Unused variable, import, function or class",tests/lib/utils/mutagen-install.test.js:13,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/utils/mutagen-install.test.js:15,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/lib/utils/mutagen-install.test.js:6,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/utils/paths-detect-app-type.test.js:19,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/utils/paths.test.js:66,,Unused variable canUnsetJestWorker.,true
+"Unused variable, import, function or class",tests/lib/utils/resolve-application-config-path.test.js:19,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/utils/run-detect-app-type.js:6,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/utils/run-get-resolve-app-path.js:6,,Unused variable path.,true
+"Unused variable, import, function or class",tests/lib/utils/schema-resolver.test.js:276,,Unused variable schemaBasePath.,true
+"Unused variable, import, function or class",tests/lib/utils/schema-resolver.test.js:31,,Unused variable mockSchemaBasePath.,true
+"Unused variable, import, function or class",tests/lib/utils/schema-resolver.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-generator.test.js:14,,Unused variable crypto.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-generator.test.js:836,,Unused variable resolvedPath.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-generator.test.js:881,,Unused variable dir.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-path.test.js:12,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-url.test.js:114,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-url.test.js:141,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-url.test.js:177,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/utils/secrets-url.test.js:85,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/utils/ssh-key-helper.test.js:82,,Unused variable ed25519Path.,true
+"Unused variable, import, function or class",tests/lib/utils/template-helpers.test.js:105,,Unused variable configPath.,true
+"Unused variable, import, function or class",tests/lib/utils/template-helpers.test.js:89,,Unused variable invalidContent.,true
+"Unused variable, import, function or class",tests/lib/utils/token-manager.test.js:590,,Unused variable afterCall.,true
+"Unused variable, import, function or class",tests/lib/utils/token-manager.test.js:622,,Unused variable afterCall.,true
+"Unused variable, import, function or class",tests/lib/utils/token-manager.test.js:66,,Unused variable mockSecretsPath.,true
+"Unused variable, import, function or class",tests/lib/utils/yaml-preserve.test.js:15,,Unused variable isEncrypted.,true
+"Unused variable, import, function or class",tests/lib/validation/openapi-contract-surface-validator.test.js:7,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/validation/template.test.js:103,,Unused variable templatePath.,true
+"Unused variable, import, function or class",tests/lib/validation/template.test.js:117,,Unused variable templatePath.,true
+"Unused variable, import, function or class",tests/lib/validation/template.test.js:229,,Unused variable subdirPath.,true
+"Unused variable, import, function or class",tests/lib/validation/template.test.js:393,,Unused variable languageTemplatePath.,true
+"Unused variable, import, function or class",tests/lib/validation/template.test.js:537,,Unused variable templatesDir.,true
+"Unused variable, import, function or class",tests/lib/validation/template.test.js:90,,Unused variable templatePath.,true
+"Unused variable, import, function or class",tests/lib/validation/validate.test.js:11,,Unused variable chalk.,true
+"Unused variable, import, function or class",tests/lib/validation/validate.test.js:9,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/lib/validation/validator-external-rbac.test.js:203,,Unused variable result.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:149,,Unused variable mockSecretsPath.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:183,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:186,,Unused variable validVariables.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:216,,Unused variable invalidVariables.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:313,,Unused variable rbacPath.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:945,,Unused variable validVariables.,true
+"Unused variable, import, function or class",tests/lib/validation/validator.test.js:955,,Unused variable validRbac.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:102,,Unused variable options.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:125,,Unused variable response.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:134,,Unused variable appName.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:135,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:174,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:248,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:257,,Unused variable variables.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:331,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/app-commands.test.js:99,,Unused variable appCommands.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-advanced.test.js:108,,Unused variable exec.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-advanced.test.js:110,,Unused variable net.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-advanced.test.js:299,,Unused variable execAsync.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-advanced.test.js:311,,Unused variable execAsync.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-advanced.test.js:323,,Unused variable execAsync.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-advanced.test.js:94,,Unused variable language.,true
+"Unused variable, import, function or class",tests/local/lib/app-run-debug.test.js:163,,Unused variable getProjectRoot.,true
+"Unused variable, import, function or class",tests/local/lib/app-uncovered-paths.test.js:139,,Unused variable config.,true
+"Unused variable, import, function or class",tests/local/lib/app-uncovered-paths.test.js:323,,Unused variable updatedVariables.,true
+"Unused variable, import, function or class",tests/local/lib/app-uncovered-paths.test.js:50,,Unused variable getProjectRoot.,true
+"Unused variable, import, function or class",tests/local/lib/app/app-additional-coverage.test.js:42,,Unused variable build.,true
+"Unused variable, import, function or class",tests/local/lib/app/app-additional-coverage.test.js:43,,Unused variable appRun.,true
+"Unused variable, import, function or class",tests/local/lib/app/app-coverage-uncovered.test.js:155,,Unused variable config.,true
+"Unused variable, import, function or class",tests/local/lib/app/app-coverage-uncovered.test.js:191,,Unused variable config.,true
+"Unused variable, import, function or class",tests/local/lib/app/app-uncovered-lines.test.js:16,,Unused variable yaml.,true
+"Unused variable, import, function or class",tests/local/lib/commands-app.test.js:146,,Unused variable variablesPath.,true
+"Unused variable, import, function or class",tests/local/lib/commands-app.test.js:183,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/commands-app.test.js:218,,Unused variable appKey.,true
+"Unused variable, import, function or class",tests/local/lib/commands-app.test.js:219,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/commands-app.test.js:83,,Unused variable result.,true
+"Unused variable, import, function or class",tests/local/lib/commands-app.test.js:93,,Unused variable environment.,true
+"Unused variable, import, function or class",tests/local/lib/resolvers/dimension-file.test.js:13,,Unused variable mkdirSync.,true
+"Unused variable, import, function or class",tests/local/lib/utils/external-readme.test.js:10,,Unused variable fs.,true
+"Unused variable, import, function or class",tests/local/lib/utils/external-readme.test.js:11,,Unused variable handlebars.,true
+"Unused variable, import, function or class",tests/local/lib/utils/external-readme.test.js:174,,Unused variable originalGenerate.,true
+"Unused variable, import, function or class",tests/local/lib/utils/external-readme.test.js:9,,Unused variable path.,true
+"Unused variable, import, function or class",tests/scripts/test-wrapper.js:51,,Unused function filterExitHandlerError.,true
+"Unused variable, import, function or class",tests/setup.js:164,,Unused variable originalMkdirSync.,true
+"Unused variable, import, function or class",tests/setup.js:165,,Unused variable originalExistsSync.,true
+Useless assignment to local variable,lib/commands/setup.js:294,,"The initial value of outcome is unused, since it is always overwritten.",true
+Useless assignment to local variable,lib/core/audit-logger.js:241,,"The initial value of controllerUrl is unused, since it is always overwritten.",true
+Useless assignment to local variable,lib/utils/external-env-template.js:145,,"The initial value of authMethod is unused, since it is always overwritten.",true
+Useless assignment to local variable,lib/utils/manifest-source-emit.js:77,,"The initial value of tier is unused, since it is always overwritten.",true
+Useless assignment to local variable,scripts/pnpm/lib/resolve-aifabrix-bin.mjs:95,,"The initial value of resolved is unused, since it is always overwritten.",true
+Useless assignment to local variable,tests/lib/app/app-run-helpers.test.js:89,,The value assigned to opts here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:162,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:211,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:300,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:331,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:368,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:504,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/infra.test.js:548,,The value assigned to options here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/services.test.js:105,,The value assigned to opts here is unused.,true
+Useless assignment to local variable,tests/lib/infrastructure/services.test.js:47,,The value assigned to opts here is unused.,true
+Useless assignment to property,tests/lib/infrastructure/infra.test.js:578,checkInfraHealth,,true
+Useless conditional,integration/hubspot-test/create-hubspot.js:339,filePatterns,This use of variable 'filePatterns' always evaluates to false.,true
+Useless conditional,lib/app/show.js:350,controllerUrl,This use of variable 'controllerUrl' always evaluates to false.,true
+Useless conditional,lib/commands/repair-openapi-sync.js:100,res,This use of variable 'res' always evaluates to true.,true
+Useless conditional,lib/core/secrets-load.js:136,keySources,This use of variable 'keySources' always evaluates to true.,true
+Useless conditional,lib/datasource/capability/relate-operations.js:26,list,This use of variable 'list' always evaluates to true.,true
+Useless conditional,lib/utils/env-copy.js:390,variablesPath,This use of variable 'variablesPath' always evaluates to true.,true
+Useless conditional,scripts/lib/plan-parse.js:114,,This call to parseSimpleYaml always evaluates to true.,true

package/.cursor/rules/assistant-driven-integration-build.mdc

@@ -0,0 +1,40 @@
+---
+description: >-
+  Apply when Builder CLI, builder-api, or agents participate in assistant-driven
+  Connected System builds. Product-neutral; runtime-orchestration is the agent
+  Work MCP; no vendor special-cases in lib/.
+globs:
+  - lib/commands/**/*
+  - lib/cli/**/*
+  - packages/builder-api/**/*
+  - builder/builder-api/**/*
+  - docs/commands/**/*
+alwaysApply: false
+---
+
+# Assistant-driven integration build (Builder)
+
+**Dataplane SSOT (full law):**  
+`../aifabrix-dataplane/.cursor/rules/dev-rules/assistant-driven-integration-build.md`  
+(in monorepo layouts use the dataplane sibling path; do not fork the law text here.)
+
+## Builder / CLI role
+
+| Mode | Allowed |
+| --- | --- |
+| **Prep** | `validate` / `upload` / `repair` for **platform** apps (builder-api), evidence import, diagnose |
+| **Proof** | Not primary — Role Assistant drives published builder-api via dataplane Runtime MCP |
+| **Improve product** | Generic builder-api / CLI gaps for **any** `systemKey` — never HubSpot/lab branches in `lib/` |
+
+## Non-negotiable
+
+1. Obey [cli-product-neutral.mdc](cli-product-neutral.mdc) — no lab keys or plan IDs in product paths.
+2. Agents proving vertical builds must orchestrate via dataplane **`runtime-orchestration`** MCP, not by inventing CLI greenfield as the proof.
+3. Fix Builder when assistant proof shows a **generic** Builder bug; do not paper over with dataplane vendor shortcuts.
+4. Dataplane capability execute binds **via COM only** — see dataplane `no-direct-communication-only-via-com.md` (no raw CIP digs in Runtime).
+
+## Related
+
+- Epic: `aifabrix-dataplane/.cursor/plans/2. worker/473.0-business-transformation-assistant.plan.md`
+- Dataplane hardcoding law: `aifabrix-dataplane/.cursor/rules/dev-rules/no-integration-hardcoding-in-app.md`
+- Dataplane COM binding law: `aifabrix-dataplane/.cursor/rules/dev-rules/no-direct-communication-only-via-com.md`

package/integration/hubspot-test/create-hubspot.js

@@ -326,29 +326,14 @@ async function copyFile(src, dest) {
  * @function copyDirectoryContents
  * @param {string} srcDir - Source directory
  * @param {string} destDir - Destination directory
- * @param {string[]} filePatterns - File patterns to match (e.g., ['*.json', '*.yaml'])
  * @returns {Promise<string[]>} Array of copied file names
  */
-async function copyDirectoryContents(srcDir, destDir, filePatterns = null) {
+async function copyDirectoryContents(srcDir, destDir) {
   await ensureDir(destDir);
   const files = await listFiles(srcDir);
   const copiedFiles = [];
 
   for (const fileName of files) {
-    // Filter by patterns if provided
-    if (filePatterns) {
-      const matches = filePatterns.some(pattern => {
-        if (pattern.startsWith('*.')) {
-          const ext = pattern.slice(1);
-          return fileName.endsWith(ext);
-        }
-        return fileName.includes(pattern);
-      });
-      if (!matches) {
-        continue;
-      }
-    }
-
     const srcPath = path.join(srcDir, fileName);
     const destPath = path.join(destDir, fileName);
     await copyFile(srcPath, destPath);

package/lib/api/evidence-kinds.api.js

@@ -0,0 +1,128 @@
+/**
+ * @fileoverview Evidence kinds API (Controller /api/v1/evidence-kinds)
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const { ApiClient } = require('./index');
+
+const BASE = '/api/v1/evidence-kinds';
+
+/**
+ * List evidence kinds (paginated)
+ * @requiresPermission {Controller} evidence-kinds:read
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {Object} [options]
+ * @returns {Promise<Object>}
+ */
+async function listEvidenceKinds(controllerUrl, authConfig, options = {}) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.get(BASE, { params: options });
+}
+
+/**
+ * Get an evidence kind by id or key
+ * @requiresPermission {Controller} evidence-kinds:read
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {string} evidenceKindIdOrKey
+ * @returns {Promise<Object>}
+ */
+async function getEvidenceKind(controllerUrl, authConfig, evidenceKindIdOrKey) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.get(`${BASE}/${encodeURIComponent(evidenceKindIdOrKey)}`);
+}
+
+/**
+ * @param {Object} payload
+ * @param {string} key
+ * @param {*} value
+ * @returns {void}
+ */
+function assignOptionalString(payload, key, value) {
+  if (value !== undefined && value !== null && value !== '') {
+    payload[key] = value;
+  }
+}
+
+/**
+ * @param {import('./types/evidence-kinds.types').CreateEvidenceKindRequest} body
+ * @returns {Object}
+ */
+function buildCreateEvidenceKindBody(body) {
+  const payload = {
+    key: body.key,
+    domainKey: body.domainKey,
+    displayName: body.displayName,
+    purpose: body.purpose
+  };
+  assignOptionalString(payload, 'description', body.description);
+  assignOptionalString(payload, 'expectedUse', body.expectedUse);
+  assignOptionalString(payload, 'source', body.source);
+  if (body.defaultSeverity) payload.defaultSeverity = body.defaultSeverity;
+  if (body.requiresApproval !== undefined && body.requiresApproval !== null) {
+    payload.requiresApproval = Boolean(body.requiresApproval);
+  }
+  if (body.isActive !== undefined && body.isActive !== null) {
+    payload.isActive = Boolean(body.isActive);
+  }
+  if (body.sortOrder !== undefined && body.sortOrder !== null) {
+    payload.sortOrder = Number(body.sortOrder);
+  }
+  if (body.metadata && typeof body.metadata === 'object') {
+    payload.metadata = body.metadata;
+  }
+  return payload;
+}
+
+/**
+ * Create an evidence kind
+ * @requiresPermission {Controller} evidence-kinds:create
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {import('./types/evidence-kinds.types').CreateEvidenceKindRequest} body
+ * @returns {Promise<Object>}
+ */
+async function createEvidenceKind(controllerUrl, authConfig, body) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.post(BASE, { body: buildCreateEvidenceKindBody(body) });
+}
+
+/**
+ * Create-if-missing (idempotent): if an evidence kind already exists for the key, return success.
+ * @requiresPermission {Controller} evidence-kinds:read + evidence-kinds:create
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {import('./types/evidence-kinds.types').CreateEvidenceKindRequest} body
+ * @returns {Promise<{ created: boolean, response: Object }>}
+ */
+async function createEvidenceKindIdempotent(controllerUrl, authConfig, body) {
+  const key = String(body?.key || '').trim();
+  if (!key) {
+    throw new Error('Evidence kind key is required');
+  }
+  const getRes = await getEvidenceKind(controllerUrl, authConfig, key);
+  if (getRes && getRes.success === true) {
+    return { created: false, response: getRes };
+  }
+  const createRes = await createEvidenceKind(controllerUrl, authConfig, body);
+  if (createRes && createRes.success === true) {
+    return { created: true, response: createRes };
+  }
+  const msg = createRes?.error || createRes?.formattedError || 'Failed to create evidence kind';
+  throw new Error(msg);
+}
+
+module.exports = {
+  listEvidenceKinds,
+  getEvidenceKind,
+  createEvidenceKind,
+  createEvidenceKindIdempotent
+};